#apiVersion: argoproj.io/v1alpha1
#kind: Application
#metadata:
#  name: openproject
#  finalizers:
#  - resources-finalizer.argocd.argoproj.io
#spec:
#  project: default
#  source:
#    repoURL: 'https://charts.openproject.org'
#    chart: openproject
#    targetRevision: 11.*.*
#    helm:
#      values: |
#        develop: false
#        ingress:
#          enabled: true
#          ingressClassName: traefik
#          annotations: 
#            kubernetes.io/ingress.class: traefik
#            traefik.ingress.kubernetes.io/router.entrypoints: websecure
#            traefik.ingress.kubernetes.io/router.tls: "true"
#            cert-manager.io/cluster-issuer: lets-encrypt-staging
#          host: "openproject.innovation-hub-niedersachsen.de"
#          path: /
#          pathType: "Prefix"
#          tls:
#            enabled: true
#            secretName: openproject-tls
#        openproject:
#          https: true
#          hsts: true
#          seed_locale: "en"
#          useTmpVolumes: "false"
#          admin_user:
#            password: "admin"
#            password_reset: true
#            name: "OpenProject Admin"
#            mail: "inno-netz@innovation-hub-niedersachsen.de"
#            openproject.useTmpVolumes: "false"
#        memcached:
#          global:
#            readOnlyRootFilesystem: false
#        containerSecurityContext:
#          readOnlyRootFilesystem: false        
#        persistence:
#          enabled: false
#          accessModes: 
#            - "ReadWriteOnce"
#        s3:
#          enabled: true
#          auth:
#            accessKeyId: "K7mNpQ2vRxL9wYtH3Zc8"
#            secretAccessKey: "jX9fK2mP5nQ8rT1vW4yZ7bN0cM3hL6gF9dS2aE5k"
#            host: "https://sws3.innovation-hub-niedersachsen.de"
#            port: 443
#        postgresql:
#          bundled: true
#          # auth:
#          #  existingSecret: "postgresql-secrets"
#          global:
#            readOnlyRootFilesystem: false 
#          options:
#            pool:
#              maxConnections: 100
#              minConnections: 20
#              connectionTimeoutMillis: 20000
#              idleTimeoutMillis: 10000
#              maxLifetimeMillis: 600000    
#  destination:
#    server: 'https://kubernetes.default.svc'
#    namespace: openproject
#  syncPolicy:
#    managedNamespaceMetadata:
#      labels: 
#        pod-security.kubernetes.io/enforce: "privileged"
#    automated:
#      selfHeal: true
#      prune: true
#    syncOptions:
#      - CreateNamespace=true